Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/9ebf01e6-77b2-3500-98f5-80a20c504eec.roa
File: 9ebf01e6-77b2-3500-98f5-80a20c504eec.roa (raw, json)
Hash identifier: oEFyEptKOqXNTdnf7Hx7s89GsXWbVEK9A91XyhOVnzQ=
Subject key identifier: 33:C3:FA:46:78:87:98:1C:8C:B5:EC:29:03:17:AB:10:3B:A5:12:33
Certificate issuer: /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Certificate serial: 010D0C9F43285848EA018F6C318D3B3B015BC900
Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/9ebf01e6-77b2-3500-98f5-80a20c504eec.roa
Signing time: Mon 17 Feb 2025 15:49:11 +0000
ROA not before: Mon 17 Feb 2025 15:49:11 +0000
ROA not after: Sun 18 May 2025 14:49:11 +0000
asID: 16509
IP address blocks: 2602:f6fc::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 04 Apr 2025 04:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ea:01:8f:6c:31:8d:3b:3b:01:5b:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Validity
Not Before: Feb 17 15:49:11 2025 GMT
Not After : May 18 14:49:11 2025 GMT
Subject: CN=8aa42a29-fce8-4102-9b2a-e8b815fe4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:5a:7f:12:b7:f6:4f:98:d2:95:5a:4a:91:
7b:48:f3:7a:8d:92:6e:1f:cb:cd:96:c7:89:0c:a2:
d1:6e:14:7e:89:23:77:8b:37:e5:fd:27:da:9e:6e:
77:30:8a:26:dd:09:44:d6:27:b1:10:89:c7:6f:42:
97:14:21:04:74:85:17:17:a2:3b:78:a2:79:85:2d:
c1:bf:12:cf:30:d1:a6:af:14:30:e2:51:ff:0e:ac:
0f:c3:b2:87:4d:35:f9:87:94:63:0e:d7:f2:66:14:
30:b3:a9:cc:1f:71:21:da:63:6a:67:6e:58:70:66:
c1:6b:42:6c:04:e5:e2:76:a0:c7:04:66:d2:1b:f2:
b0:73:d7:e2:4a:0b:bd:b1:ee:66:96:e2:73:46:33:
c4:58:5e:72:84:b4:be:bb:f4:d0:67:e7:e1:dd:11:
d9:7f:28:e1:19:32:7e:6d:15:0a:84:16:3c:b9:27:
82:05:bf:cb:59:51:ad:5b:b7:22:f2:37:aa:67:75:
f5:18:9f:9a:72:92:61:e8:c9:a4:f7:50:ab:54:06:
4f:95:61:60:ab:5a:80:90:a7:d3:62:4e:10:34:29:
bb:80:26:04:b9:e4:02:72:58:02:21:fb:54:fe:7c:
12:b4:3a:2d:e5:26:8b:8c:26:92:d4:13:0b:d0:0e:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:FA:46:78:87:98:1C:8C:B5:EC:29:03:17:AB:10:3B:A5:12:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/9ebf01e6-77b2-3500-98f5-80a20c504eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl
X509v3 Authority Key Identifier:
keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f6fc::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:7f:f5:7b:5c:8a:e0:34:71:2b:b8:ae:61:2f:4c:f1:43:d4:
b5:03:7c:e6:ac:81:e1:71:5c:90:4b:35:17:cb:0d:72:d5:d4:
ae:69:30:cf:48:a4:e1:0f:a9:c1:5f:90:10:a8:48:7e:8e:53:
d9:75:a3:9c:57:84:b8:4e:9a:45:92:4c:e6:e2:72:7c:17:a2:
0a:be:93:ac:77:01:be:92:17:4c:4e:88:b9:7b:92:8a:af:8e:
17:11:e9:c3:6c:27:4a:98:54:2f:d1:b6:97:4e:3c:27:2b:b3:
b1:46:6a:91:aa:a9:ae:49:0f:f3:1b:d2:4f:cc:89:e4:db:d7:
b9:13:49:ba:34:77:6a:68:59:23:5e:36:a0:27:41:59:82:2e:
71:1d:23:e1:cd:bc:27:b3:59:27:9c:b8:6f:65:f9:95:18:96:
a5:d9:b0:07:12:15:8e:a9:d6:df:53:84:c3:36:6e:06:a2:7b:
dc:af:f1:b6:7f:f6:d5:d4:ab:9b:64:92:81:3d:07:3b:0c:3c:
96:6f:fa:1e:9b:9d:c7:2c:57:4f:93:37:0d:ad:88:ce:f6:8e:
e9:85:7d:67:80:d2:e7:89:65:d1:9c:62:72:cc:99:d1:83:47:
f2:2e:36:cd:c2:98:6e:eb:82:3c:20:72:e0:e2:b9:a8:03:b5:
d8:5c:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:51:30 2025 by rpki-client